rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P23417/1:b..l P23075/1:b..l P23398/1:b..l
rcu: 	(detected by 1, t=10567 jiffies, g=126937, q=651 ncpus=2)
task:syz.2.4468      state:R  running task     stack:23448 pid:23398 tgid:23398 ppid:5611   task_flags:0x40064c flags:0x00080003
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5533 [inline]
 __schedule+0x1259/0x6920 kernel/sched/core.c:7284
 preempt_schedule_notrace+0x57/0xd0 kernel/sched/core.c:7556
 preempt_schedule_notrace_thunk+0x16/0x30 arch/x86/entry/thunk.S:13
 rcu_is_watching+0x90/0xc0 kernel/rcu/tree.c:754
 trace_lock_release include/trace/events/lock.h:68 [inline]
 lock_release+0x24d/0x310 kernel/locking/lockdep.c:5954
 rcu_lock_release include/linux/rcupdate.h:319 [inline]
 rcu_read_unlock include/linux/rcupdate.h:880 [inline]
 class_rcu_destructor include/linux/rcupdate.h:1216 [inline]
 unwind_next_frame+0x3c3/0x2090 arch/x86/kernel/unwind_orc.c:495
 arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
 save_stack+0x162/0x1e0 mm/page_owner.c:183
 __reset_page_owner+0x84/0x190 mm/page_owner.c:338
 reset_page_owner include/linux/page_owner.h:26 [inline]
 __free_pages_prepare mm/page_alloc.c:1418 [inline]
 free_unref_folios+0xa4a/0x1790 mm/page_alloc.c:3022
 folios_put_refs+0x585/0xaa0 mm/folio.c:1036
 folio_batch_release include/linux/folio_batch.h:101 [inline]
 shmem_undo_range+0x5e5/0x1570 mm/shmem.c:1161
 shmem_truncate_range mm/shmem.c:1289 [inline]
 shmem_evict_inode+0x3b1/0xca0 mm/shmem.c:1420
 evict+0x3c2/0xad0 fs/inode.c:822
 iput_final fs/inode.c:2014 [inline]
 iput.part.0+0x989/0x1050 fs/inode.c:2063
 iput+0x35/0x40 fs/inode.c:2029
 dentry_unlink_inode+0x284/0x470 fs/dcache.c:479
 dentry_kill+0x25d/0xc20 fs/dcache.c:826
 finish_dput fs/dcache.c:1001 [inline]
 dput.part.0+0xd7/0x240 fs/dcache.c:1042
 dput+0x1f/0x30 fs/dcache.c:1037
 __fput+0x51a/0xb60 fs/file_table.c:520
 task_work_run+0x150/0x240 kernel/task_work.c:233
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0x8da/0x2a50 kernel/exit.c:986
 do_group_exit+0xd5/0x2a0 kernel/exit.c:1129
 get_signal+0x1ec7/0x21e0 kernel/signal.c:3112
 arch_do_signal_or_restart+0x91/0x7e0 arch/x86/kernel/signal.c:337
 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:101 [inline]
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
 irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:244 [inline]
 irqentry_exit_to_user_mode include/linux/irq-entry-common.h:315 [inline]
 irqentry_exit+0x402/0xa10 kernel/entry/common.c:165
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x0
RSP: 002b:00002000000002c8 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007f087c625fa0 RCX: 00007f087c39e559
RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000020000
RBP: 00007f087c4358b0 R08: 00002000000007c0 R09: 00002000000007c0
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 00007f087c626038 R14: 00007f087c625fa0 R15: 00007ffcec08eb28
 </TASK>
task:syz.6.4389      state:R  running task     stack:19528 pid:23075 tgid:23075 ppid:10936  task_flags:0x400e40 flags:0x0008000b
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5533 [inline]
 __schedule+0x1259/0x6920 kernel/sched/core.c:7284
 preempt_schedule_irq+0x4e/0x90 kernel/sched/core.c:7606
 irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline]
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
 irqentry_exit+0x205/0xa10 kernel/entry/common.c:167
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x20 kernel/kcov.c:309
Code: 0c 24 0f b7 d6 0f b7 f7 bf 03 00 00 00 e9 48 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 8b 0c 24 89 f2 89 fe bf 05 00 00 00 e9 1a fe ff ff
RSP: 0018:ffffc900067160b8 EFLAGS: 00000246
RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000000
RDX: ffff88802e758000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000000a
R13: ffff88801ea8ee00 R14: 0000000000000000 R15: ffff88801ea8ee00
 rcu_read_unlock include/linux/rcupdate.h:878 [inline]
 list_lru_count_one+0x12c/0x320 mm/list_lru.c:318
 list_lru_shrink_count include/linux/list_lru.h:260 [inline]
 super_cache_count+0x1dc/0x290 fs/super.c:268
 do_shrink_slab+0x83/0x1200 mm/shrinker.c:391
 shrink_slab_memcg mm/shrinker.c:562 [inline]
 shrink_slab+0xa82/0x12e0 mm/shrinker.c:640
 shrink_node_memcgs mm/vmscan.c:6222 [inline]
 shrink_node+0x812/0x4320 mm/vmscan.c:6264
 shrink_zones mm/vmscan.c:6503 [inline]
 do_try_to_free_pages+0x33e/0x16d0 mm/vmscan.c:6565
 try_to_free_mem_cgroup_pages+0x2bf/0x840 mm/vmscan.c:6887
 try_charge_memcg+0x50b/0xf60 mm/memcontrol.c:2718
 charge_memcg+0x1ae/0x210 mm/memcontrol.c:5210
 __mem_cgroup_charge+0x2b/0x1c0 mm/memcontrol.c:5227
 mem_cgroup_charge include/linux/memcontrol.h:662 [inline]
 shmem_alloc_and_add_folio+0x451/0xd40 mm/shmem.c:1988
 shmem_get_folio_gfp+0x75b/0x1980 mm/shmem.c:2531
 shmem_fault+0x1fb/0xa30 mm/shmem.c:2732
 __do_fault+0x10b/0x440 mm/memory.c:5565
 do_read_fault mm/memory.c:6000 [inline]
 do_fault+0xb3f/0x1830 mm/memory.c:6134
 do_pte_missing mm/memory.c:4700 [inline]
 handle_pte_fault mm/memory.c:6558 [inline]
 __handle_mm_fault+0x150b/0x2f60 mm/memory.c:6707
 handle_mm_fault+0x363/0xa20 mm/memory.c:6876
 faultin_page mm/gup.c:1126 [inline]
 __get_user_pages+0x8ae/0x2c30 mm/gup.c:1428
 __get_user_pages_locked mm/gup.c:1692 [inline]
 get_dump_page+0x27e/0x3d0 mm/gup.c:2192
 dump_user_range+0x18d/0xad0 fs/coredump.c:1361
 elf_core_dump+0x2d68/0x3d20 fs/binfmt_elf.c:2106
 coredump_write fs/coredump.c:1047 [inline]
 do_coredump fs/coredump.c:1126 [inline]
 vfs_coredump+0x281a/0x54a0 fs/coredump.c:1195
 get_signal+0x1f2a/0x21e0 kernel/signal.c:3097
 arch_do_signal_or_restart+0x91/0x7e0 arch/x86/kernel/signal.c:337
 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:101 [inline]
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
 irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:244 [inline]
 irqentry_exit_to_user_mode include/linux/irq-entry-common.h:315 [inline]
 irqentry_exit+0x402/0xa10 kernel/entry/common.c:165
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x7f684eb9e561
RSP: 002b:00000000ffffffb0 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007f684ee25fa0 RCX: 00007f684eb9e559
RDX: 0000000000000000 RSI: 00000000ffffffb0 RDI: 0000000000000400
RBP: 00007f684ec358b0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 00007f684ee26038 R14: 00007f684ee25fa0 R15: 00007ffec107b588
 </TASK>
task:syz.3.4473      state:R  running task     stack:23448 pid:23417 tgid:23417 ppid:23413  task_flags:0x400640 flags:0x00080001
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5533 [inline]
 __schedule+0x1259/0x6920 kernel/sched/core.c:7284
 preempt_schedule_irq+0x4e/0x90 kernel/sched/core.c:7606
 irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline]
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
 irqentry_exit+0x205/0xa10 kernel/entry/common.c:167
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:deref_stack_reg arch/x86/kernel/unwind_orc.c:422 [inline]
RIP: 0010:unwind_next_frame+0x157d/0x2090 arch/x86/kernel/unwind_orc.c:677
Code: 0f 84 f3 ed ff ff 48 89 ef e8 9f e2 ff ff 49 8d 7d 40 48 89 fa 48 89 c5 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 <0f> 84 17 fa ff ff e8 38 c2 c6 00 e9 0d fa ff ff 48 b8 00 00 00 00
RSP: 0018:ffffc9000dd76290 EFLAGS: 00000246
RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff92f8814e
RDX: 1ffff92001baec68 RSI: ffffc9000dd76518 RDI: ffffc9000dd76340
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000007
R10: 0000000000000200 R11: 0000000000018b50 R12: ffffc9000dd76350
R13: ffffc9000dd76300 R14: ffffc9000dd76548 R15: ffffc9000dd76334
 arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
 save_stack+0x162/0x1e0 mm/page_owner.c:183
 __set_page_owner+0x8c/0x540 mm/page_owner.c:359
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1871
 prep_new_page mm/page_alloc.c:1879 [inline]
 get_page_from_freelist+0x110d/0x35d0 mm/page_alloc.c:3943
 __alloc_frozen_pages_noprof+0x2eb/0x3300 mm/page_alloc.c:5436
 alloc_pages_mpol+0x201/0x550 mm/mempolicy.c:2486
 folio_alloc_mpol_noprof+0x36/0x260 mm/mempolicy.c:2505
 shmem_alloc_folio+0x135/0x160 mm/shmem.c:1936
 shmem_alloc_and_add_folio+0x371/0xd40 mm/shmem.c:1978
 shmem_get_folio_gfp+0x75b/0x1980 mm/shmem.c:2531
 shmem_get_folio mm/shmem.c:2637 [inline]
 shmem_write_begin+0x1a4/0x420 mm/shmem.c:3268
 generic_perform_write+0x292/0xa40 mm/filemap.c:4374
 shmem_file_write_iter+0x10e/0x140 mm/shmem.c:3443
 __kernel_write_iter+0x2ac/0x930 fs/read_write.c:621
 dump_emit_page fs/coredump.c:1293 [inline]
 dump_user_range+0x3f9/0xad0 fs/coredump.c:1367
 elf_core_dump+0x2d68/0x3d20 fs/binfmt_elf.c:2106
 coredump_write fs/coredump.c:1047 [inline]
 do_coredump fs/coredump.c:1126 [inline]
 vfs_coredump+0x281a/0x54a0 fs/coredump.c:1195
 get_signal+0x1f2a/0x21e0 kernel/signal.c:3097
 arch_do_signal_or_restart+0x91/0x7e0 arch/x86/kernel/signal.c:337
 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:101 [inline]
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
 irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:244 [inline]
 irqentry_exit_to_user_mode include/linux/irq-entry-common.h:315 [inline]
 irqentry_exit+0x402/0xa10 kernel/entry/common.c:165
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x0
RSP: 002b:00002000000002c8 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007f17f2c25fa0 RCX: 00007f17f299e559
RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000020000
RBP: 00007f17f2a358b0 R08: 00002000000007c0 R09: 00002000000007c0
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 00007f17f2c26038 R14: 00007f17f2c25fa0 R15: 00007ffd85bf4358
 </TASK>
rcu: rcu_preempt kthread starved for 10570 jiffies! g126937 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:27560 pid:17    tgid:17    ppid:2      task_flags:0x208040 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5533 [inline]
 __schedule+0x1259/0x6920 kernel/sched/core.c:7284
 __schedule_loop kernel/sched/core.c:7361 [inline]
 schedule+0xdd/0x2c0 kernel/sched/core.c:7376
 schedule_timeout+0x127/0x280 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x1a9/0x8f0 kernel/rcu/tree.c:2122
 rcu_gp_kthread+0x17a/0x220 kernel/rcu/tree.c:2330
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 23425 Comm: syz.6.4476 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
RIP: 0010:its_return_thunk+0x0/0x10 arch/x86/lib/retpoline.S:437
Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <c3> cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 8b 82 9e f5 cc
RSP: 0000:ffffc90005017578 EFLAGS: 00000296
RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffc9000fb16000
RDX: 0000000000000001 RSI: ffffffff8c625500 RDI: ffffffff8c625540
RBP: 1ffff92000a02ec1 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff82590587
R13: 0000000000000000 R14: ffff88801ea8fb00 R15: dffffc0000000000
FS:  00007f684fb076c0(0000) GS:ffff888122946000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f684f95d520 CR3: 0000000071151000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000063235cd5
DR3: 0000000000007000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 rcu_is_watching_curr_cpu include/linux/context_tracking.h:128 [inline]
 rcu_is_watching+0x13/0xc0 kernel/rcu/tree.c:753
 rcu_read_lock include/linux/rcupdate.h:850 [inline]
 shrink_slab_memcg mm/shrinker.c:524 [inline]
 shrink_slab+0xc43/0x12e0 mm/shrinker.c:640
 shrink_node_memcgs mm/vmscan.c:6222 [inline]
 shrink_node+0x812/0x4320 mm/vmscan.c:6264
 shrink_zones mm/vmscan.c:6503 [inline]
 do_try_to_free_pages+0x33e/0x16d0 mm/vmscan.c:6565
 try_to_free_mem_cgroup_pages+0x2bf/0x840 mm/vmscan.c:6887
 try_charge_memcg+0x50b/0xf60 mm/memcontrol.c:2718
 try_charge mm/memcontrol.c:2860 [inline]
 obj_cgroup_charge_pages+0x2b/0x1f0 mm/memcontrol.c:3161
 __obj_cgroup_charge mm/memcontrol.c:3539 [inline]
 __memcg_slab_post_alloc_hook+0x47f/0x10c0 mm/memcontrol.c:3669
 memcg_slab_post_alloc_hook mm/slub.c:2517 [inline]
 slab_post_alloc_hook mm/slub.c:4702 [inline]
 slab_alloc_node mm/slub.c:4996 [inline]
 kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 mm/slub.c:5029
 sock_alloc_inode+0x26/0x2c0 net/socket.c:330
 alloc_inode+0x68/0x250 fs/inode.c:338
 new_inode_pseudo include/linux/fs.h:3047 [inline]
 sock_alloc+0x44/0x280 net/socket.c:710
 __sock_create+0xc2/0x860 net/socket.c:1640
 sock_create net/socket.c:1734 [inline]
 __sys_socket_create net/socket.c:1771 [inline]
 __sys_socket+0x14d/0x260 net/socket.c:1818
 __do_sys_socket net/socket.c:1832 [inline]
 __se_sys_socket net/socket.c:1830 [inline]
 __x64_sys_socket+0x72/0xb0 net/socket.c:1830
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f684eb9e559
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f684fb07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
RAX: ffffffffffffffda RBX: 00007f684ee26090 RCX: 00007f684eb9e559
RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010
RBP: 00007f684ec358b0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f684ee26128 R14: 00007f684ee26090 R15: 00007ffec107b588
 </TASK>